Data Privacy Policy

Thank you for visiting our website and for your interest in our company. We take the lawful use and protection of your personal data very seriously. We treat your personal data with strict confidentiality in accordance with statutory data privacy regulations. To explain our procedures, we have created this document with a host of information.

General information on data processing on our website

As the operator of the website www.limelight-veranstaltungstechnik.de, we are under obligation to inform users of the type, extent and purpose of our collection and use of their personal data.

In general, use of our website is possible without a requirement to enter personal data.
As far as possible, nay collection of personal details on our website is always on a voluntary basis and with the user’s prior consent.
Exceptions are cases where obtaining consent is not possible or where processing of personal data is permitted under legal regulations or on another legal basis.
As part of provision and use of the website, we receive information about IP addresses that have accessed a page and the time of access.
We use this information for the purpose of statistical analysis of user behavior on our website. These analyses are primarily intended to support the provision of a functioning website and to improve the content and services provided on the website.

Please note that data transmission via the Internet (e.g. unencrypted e-mail communication) may involve security risks. Full protection of data from access by third parties is impossible.
For this reason, we strongly advise that you do not use e-mail to send us confidential or protected information, but contact us first to discuss how best to share the data.

We reserve the right to change the content of this Data Privacy Policy at any time to ensure it remains in line with currently valid legal requirements at all times.
The updated Data Privacy Policy will apply on your next visit to the website.

Contact details of data controller

The data controller within the meaning of the EU General Data Protection Regulation (GDPR) and other relevant data protection laws is:

Limelight Veranstaltungstechnik GmbH
Oliver Lembke 
Zeppelinstr. 8
82205 Gilching
Telephone: +49 (0)8105 778840

Contact details of data protection officer

The data protection officer is:

Anton Übelhör
ISC Infra-Struktur-Consulting GmbH
Herzog-Albrecht-Str. 7
D-82131 Gauting
Telephone: +49 (0)89 323633-22
E-mail: datenschutzbeauftragter@limelight.de

Legal basis for processing data on our website

Processing of personal data on our website is based on the provisions of the EU General Data Protection Regulation (GDPR) and national data protection regulations in accordance with the following legal foundations:

a.) Data processing based on data subject’s consent (Art. 6 (1) lit a GDPR “Lawfulness of processing”):
If you have given your consent to our processing personal data for specific purposes, the lawfulness of our data processing is based on your consent. Your consent can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of the data processed up to the time of withdrawal.

b) Data processing for the purpose of compliance with our contractual obligations (Art. 6 (1) lit b GDPR):
Further grounds for our processing of your data may be fulfillment of an agreement concluded with you or fulfillment of a pre-contractual measure. Details of the purposes of data processing in individual cases are found in the relevant contractual documents for the case in question.

c.) Data processing based on consideration of interests (Art. 6 (1) lit f GDPR):
Where required, we process your data to safeguard our legitimate interests or those of third parties. These may include:
Responding to your inquiries to us,
Submission of legal claims and defense in legal disputes.

Purpose of data processing on the website

As a general principle, our website can be used without the need to enter personal data. To the extent that we collect your personal data on our website, we do so for the following purposes:
Technical provision of the website and monitoring of functionality,
Contact via the contact form and response to inquiries,
Statistical analysis of website use.

Types of data collection on the website

Server-Log-Files, Website Hosting

The provider whose services (infrastructure, computing capacity, memory capacity, etc.) we use to operate our website collects and saves a variety of data (contact details, content data, use data, metadata and communication data from interested parties and visitors to our website) which is generated during a user’s visit to our website.
Processing of these data is based on our legitimate interests in ensuring the efficient operation and secure and reliable availability and provision of our website in accordance with Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR (contract data processing).
In this context, all incidences of access to the servers are recorded in server log files, which save information including:
Browser type and browser version,
Operating system,
Referrer URL (previously visited website),
IP address of PC accessing the site,
Date and time of access.
These data are initially stored for use in the event of e.g. clarifying cases of misuse or fraud, and are subsequently deleted. Data that are required to be stored further as potential evidence are retained until final clarification of the case in question, and then deleted.
We also use data sent from your browser to our servers for the purposes of analysis and improvement of our service offering.These data are used e.g. for detecting faults or identifying usage peaks.
These data are not associated with specific individuals. They are never combined with data from other data sources.

Contact form

Our contact form collects your name, company name, e-mail address, and telephone number on the basis of our legitimate interest in a detailed and comprehensive response to your inquiry (in accordance with Art. 6 (1) lit. f GDPR).
These data are processed for the purpose of responding to your inquiry. Once this purpose no longer applies, they are deleted unless retention is required in connection with contractual fulfillment.

Use of Google Maps

Our website uses the Google Maps API to display geographical information. As part of this, corresponding program libraries / map contents are accessed from the Google servers. Please note that this process may involve access to external Google servers in the USA. Google may also log this server request for further processing. You should assume that personal data comprising your IP address at minimum will be saved over a long period. For more information, see the Google data privacy policy.

Social Media Plugins

Our website does not use social network plugins.

Data Recipients

We generally process your data directly ourselves.
In individual cases, we appoint service providers to process data on our behalf in order to fulfill our contractual obligations to our customers.
In such cases, the data is transferred to these recipients for further treatment. We make every effort to carefully select these external service providers and review them regularly to ensure the confidentiality of your data is upheld.
These service providers are contract data processors bound by our instructions. Among other obligations, they undertake to treat your personal data exclusively in accordance with our instructions and with the relevant applicable data protection laws. Specifically, they undertake to treat your data with strict confidentiality. They are further prohibited from processing the data for any other purposes than those agreed.
Transfer of data to contract data processors is governed by Art. 28 (1) GDPR.

Transfer of data to third countries

No transfer of data to third countries is currently planned.

Duration of data storage / Deletion periods

Under consideration of the principle of data minimization, we only store your personal data after processing for as long as is necessary to achieve the purpose of processing in the individual case, or to comply with the numerous statutory storage and retention periods.
Once the processing purpose no longer applies, or if the user withdraws consent to processing of personal data, or after expiry of the statutory retention period, the data in question are routinely blocked or deleted in accordance with statutory regulations.

Rights of the data subject

The following overview presents a list of your rights as a data subject as defined in the GDPR. Please consult the individual legal documents for the precise wording. 
If you exercise your rights with respect to rectification or erasure of your personal data or to restriction of data processing, we will notify all recipients to which personal data are transferred provided said notification is feasible and does not involve unreasonable efforts.
In the event that you would like to receive information from us about your processed data or with to exercise another right to which you are entitled (rectification, erasure, restriction of processing, transfer of data to another data controller), please contact us using the contact information given at the start of this document. We will respond within one month.
- Right of access, Art. 15 GDPRSGVO
You have the right to receive information from the data controller concerning processing of your personal data.
- Right to rectification, Art. 16 GDPR
You have the right to request the data controller to rectify any mistakes in your personal data and to complete any incomplete data.
- Right to erasure, Art. 17 GDPR
Sie haben das Recht, vom Verantwortlichen die Löschung von unrichtigen Daten zu verlangen, sofern keine rechtliche Verpflichtung dem entgegensteht. Es kann darüber hinaus weitere Gründe geben, die einer Löschung entgegenstehen.
- Recht auf Einschränkung der Verarbeitung, Art. 18 DSGVO
Sie haben das Recht, vom Verantwortlichen die Einschränkung der Verarbeitung der Daten zu verlangen, falls Sie beispielsweise die Richtigkeit der Daten bestreiten (weitere Gründe, siehe Art.18 DSGVO)
- Recht auf Datenübertragbarkeit, Art. 20 DSGVO
You have the right to request the data controller to erase incorrect data unless this conflicts with any statutory obligation. There may be further reasons preventing erasure of the data.
- Right to restriction of processing, Art. 18 GDPR
You have the right to request the data controller to restrict data processing, for example if you dispute the correctness of the data (for further grounds, see Art.18 GDPR).
- Right to data portability, Art. 20 GDPR
Under specific framework conditions, you have the right to receive the data you have provided to the data controllers. (For details see Art. 20 GDPR)
- Right to object, Art. 21 GDPR
You have the right to object to processing of your data where such processing is based on “legitimate interests” on our part (Art.6 (1) lit. f GDPR).
- Right to withdraw consent
You have the right to withdraw your consent at any time without stating reasons.
- Right to lodge a complaint Art. 77 GDPR
You have the right to lodge a complaint with a supervisory authority if you consider that processing of your personal data represents an infringement of statutory regulations.

If you require further information or have any questions about data protection, please contact the officer in question (data controller/data protection officer). 

In case of doubt the German version shall prevail: https://www.limelight-veranstaltungstechnik.de/de/datenschutzerklaerung.